Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: DpP0k9ukvIiYYisoVa8qUxfUmK3/zdP+fo+pzYng41Q=
Subject key identifier: 84:01:60:24:81:E3:B0:C2:27:3C:8D:EB:47:2E:19:97:11:0E:E9:FE
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019A4E86DEA6E89123B88CB86CCC71F0AD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0B8B
Signing time: Tue 04 Nov 2025 11:00:52 +0000
Manifest this update: Tue 04 Nov 2025 11:00:52 +0000
Manifest next update: Wed 05 Nov 2025 11:00:52 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: OrEcSVOWrE37u6Zwn+s7++Z/6bhn/XFkqmPBOKSae6A=)
2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:de:a6:e8:91:23:b8:8c:b8:6c:cc:71:f0:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Nov 4 11:00:52 2025 GMT
Not After : Nov 5 11:00:52 2025 GMT
Subject: CN=8401602481e3b0c2273c8deb472e1997110ee9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:2d:51:53:5e:6c:9b:5d:a3:6b:ff:4f:5b:
ab:1e:2d:a6:a7:d0:15:2a:05:ce:9a:8b:8b:07:5b:
b3:89:b4:a0:f9:c5:f2:9b:6a:34:42:63:03:5f:2f:
ef:80:4e:3e:36:9a:e9:fb:bb:a6:61:d2:b4:ee:dc:
a2:3a:8c:51:55:f3:b0:75:52:76:28:3a:9f:ac:24:
93:21:02:2f:97:61:4c:18:87:98:e8:81:7e:f5:57:
bc:b3:02:dc:35:f4:9b:8b:75:34:ba:10:8a:31:22:
7a:5d:7b:ec:6a:6a:0b:58:8d:55:64:3f:4e:19:cc:
e6:5a:f3:92:ff:7e:9d:f2:1a:4f:76:78:ac:57:73:
9b:36:7d:30:9a:61:f0:ae:e9:2d:4b:2c:66:f5:42:
cd:55:37:c1:25:5c:41:f5:65:04:fa:f8:51:90:50:
f0:9c:d6:ae:16:cd:b4:66:07:3c:09:c6:2a:ee:30:
6d:3d:86:0b:27:72:97:81:8f:cc:63:b9:ed:e5:19:
03:63:08:51:ce:d8:e9:45:5c:87:da:72:83:c8:b5:
83:4d:99:3b:bc:75:92:f0:76:96:46:32:5d:4c:aa:
ce:30:03:54:ef:f5:4a:aa:b7:0c:51:99:a9:80:da:
33:b9:75:1e:72:11:11:21:df:b1:e5:ce:68:2d:05:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:01:60:24:81:E3:B0:C2:27:3C:8D:EB:47:2E:19:97:11:0E:E9:FE
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:1c:ef:21:7a:ad:51:01:82:79:83:67:bf:e4:59:d6:4e:
72:9a:cf:b4:7e:46:e2:64:18:1e:ed:af:41:eb:1f:2b:0e:6e:
53:44:bc:34:29:2b:34:03:b6:41:0b:56:45:a3:77:b3:fe:79:
07:25:92:e3:23:ed:16:d6:cc:f6:d3:d3:c5:d4:13:e9:42:1e:
6f:b9:c7:3d:dd:b0:a9:cf:e4:8b:db:a3:a6:f8:a1:49:b4:6d:
76:1d:2e:df:1e:df:8e:ec:b4:c9:65:e0:1d:37:c6:5f:92:5c:
98:9f:4b:d4:ef:98:e3:98:7d:ed:2f:81:37:ad:11:3e:05:b8:
0d:a4:54:86:9b:87:e8:29:e6:92:b5:a3:13:5b:90:f3:49:ce:
13:67:f2:ae:af:ca:36:0d:ee:89:a9:bb:83:f8:bd:a7:44:c4:
dd:2d:63:22:03:7a:15:b1:a4:44:9d:a1:74:eb:63:f0:19:dd:
98:24:a1:82:79:88:4a:15:85:ff:75:bb:cd:b3:e8:d0:46:3e:
c8:88:e5:9d:83:9d:5d:69:14:c5:b3:57:5a:e5:b8:c7:dc:e5:
7e:7d:ed:a7:10:c9:43:f8:b0:ee:d2:38:3e:42:1d:ac:3e:1c:
69:4c:fc:98:f9:35:7b:f2:c7:08:6a:ad:22:e2:eb:06:41:0d:
fd:e0:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:02 2025 by rpki-client